Nigeria: AI cyber threats surge
Agency Report
Nigeria is on track to become one of Africa’s leading digital economies, with internet and mobile phone usage climbing steadily and the nation’s digital transformation market projected to reach nearly $27 billion by 2030.
However, this rapid growth is being shadowed by a surge in AI-powered cyber threats, raising serious concerns about cybersecurity across the country.
Recent research from Microsoft highlights a global uptick in AI-fueled fraud attacks, with Nigeria increasingly feeling the impact.
As the country’s digital footprint expands—especially in areas like e-commerce, online services, and remote work—the sophistication and frequency of cyberattacks have grown exponentially.
According to Deloitte, Nigeria experienced a sharp increase in cyber threats in 2024, with generative AI playing a major role in amplifying the reach and precision of these attacks.
Cybersecurity incidents are being described as nearing “pandemic-like” proportions, particularly as deepfake attacks in Africa surged sevenfold between the first quarter and fourth quarter of 2024.
“AI technology is giving cybercriminals the tools to create incredibly deceptive scams,” said Ola Williams, Managing Director of Microsoft Nigeria and Ghana.
“With the ability to draw on fake product reviews, AI-generated websites, deepfakes, and voice cloning, these scammers can conduct widespread campaigns while appearing authentic.”
In its Cyber Signals report, Microsoft outlined some of the most alarming threats emerging from AI misuse:
Nigeria is now one of the fastest-growing e-commerce markets in Africa, with user penetration surpassing regional averages, according to Statista. But this growth has attracted fraudsters who are leveraging AI to create convincing fake websites within minutes. These fraudulent sites mimic trusted retailers, complete with AI-generated product descriptions, reviews, and customer service chatbots.
These chatbots can convincingly interact with buyers, providing fake order confirmations and delaying refunds through scripted responses—making scams harder to detect.
To tackle this, experts recommend job platforms implement multi-factor authentication for employers and utilize AI-based fraud detection tools to flag suspicious activity.
In one major incident reported by Microsoft Threat Intelligence in April 2024, a group called Storm-1811 exploited Windows Quick Assist, impersonating IT personnel to gain remote access to users’ computers.
These scams, powered by social engineering tactics, are increasingly effective when paired with AI tools that mine personal information to create believable lures via phone calls, emails, or text messages.
“Storm-1811’s use of voice phishing shows how cybercriminals are bypassing traditional security defenses by targeting people directly,” Microsoft noted.
To counter such threats, experts recommend adopting Zero Trust security frameworks, which limit access privileges and encourage verification at every level. Organizations are also urged to educate employees about the dangers of unsolicited tech support and establish secure, verified help desk procedures.
“As Nigeria’s digital economy grows, the rise in AI-driven scams reminds us that vigilance, education, and robust security measures are essential,” Williams emphasized.
“By understanding these threats and empowering ourselves with knowledge, we can create a safer digital world for all.”
